Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4d70cbb1-bfe5-366e-9187-3e5e3a594100.roa
File:                     4d70cbb1-bfe5-366e-9187-3e5e3a594100.roa (raw, json)
Hash identifier:          pwSU0ohYJgI/9z3C0Ge8U63CoTcVP8B5U9YeELsMmG4=
Subject key identifier:   DC:55:4E:84:FE:67:85:32:B2:71:0D:A6:38:11:BD:31:44:D6:95:6C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285840473F02D28CEB796A9B93FD00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4d70cbb1-bfe5-366e-9187-3e5e3a594100.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Sat 22 Mar 2025 04:00:00 +0000
asID:                     60721
IP address blocks:        216.107.131.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 17 Feb 2023 17:25:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:47:3f:02:d2:8c:eb:79:6a:9b:93:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : Mar 22 04:00:00 2025 GMT
        Subject: CN=384ceb5d-aec9-4de9-971f-8f4b7c1f2467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:10:a7:83:dc:3d:ae:9d:42:4f:9a:1e:3b:0f:
                    f9:dc:a8:e2:f2:2b:dd:56:55:cd:27:1b:8b:5f:ce:
                    71:59:ee:cc:c5:cf:14:c6:53:0a:0a:99:79:13:33:
                    1d:ba:35:33:c0:fa:c4:7c:3f:20:b4:68:3d:76:40:
                    b3:04:d3:11:49:55:a0:ef:79:4e:1e:f6:81:9e:cc:
                    ce:fe:1c:b4:7b:5c:04:c1:66:2c:9d:d4:27:7d:36:
                    cc:ab:91:c7:96:1e:5f:31:4a:94:a5:bb:93:6a:f6:
                    7f:94:c8:23:2b:f3:ce:0a:26:cc:fb:e9:17:28:52:
                    26:d9:7a:06:59:a0:c7:6d:78:08:68:6a:74:97:f1:
                    9a:64:88:70:4c:48:d1:77:ad:fc:f9:a4:53:66:d1:
                    33:f6:7d:d2:3c:c4:3a:5d:bf:74:6f:09:68:94:19:
                    a3:92:66:8f:74:dd:f6:5b:a9:ab:0e:5c:da:a8:32:
                    ba:54:61:94:cd:40:66:8c:3f:7f:84:85:7b:a6:0d:
                    13:09:2d:c5:4d:e2:e0:03:e6:ab:7b:d8:6f:ba:37:
                    9f:f2:d9:8f:3f:57:aa:45:3f:46:66:40:f8:25:3b:
                    13:f4:1b:f0:17:ba:1b:7a:cd:90:25:3d:45:d4:ab:
                    43:c3:4a:8d:a1:9b:73:67:81:8d:10:15:fb:ea:33:
                    33:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:55:4E:84:FE:67:85:32:B2:71:0D:A6:38:11:BD:31:44:D6:95:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4d70cbb1-bfe5-366e-9187-3e5e3a594100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.107.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:14:ff:e5:91:0b:e1:1c:27:c1:b0:ee:b2:a4:83:7d:a4:71:
         0a:0d:f3:66:a9:85:43:34:0c:dd:9c:88:04:b1:ca:8d:e2:33:
         96:37:3b:64:26:61:69:5d:8e:ef:86:49:60:ec:f4:e4:60:8d:
         e7:cf:8a:c7:65:79:2c:b1:8d:7a:ee:4f:4e:fb:5c:96:29:f1:
         80:38:90:84:c7:bf:17:c3:1e:67:cf:73:63:e1:fa:40:17:bf:
         e5:c6:44:7d:fc:da:86:c9:0b:6b:50:f6:20:64:d8:c0:5f:0a:
         b0:d9:cc:a7:32:97:4c:96:9d:ea:59:54:a4:ba:07:01:75:9f:
         4c:a1:01:ab:c6:51:f1:7d:8d:49:9a:ea:02:d4:bc:92:60:56:
         f8:58:5c:be:e9:91:df:5f:6e:cd:3b:6a:b5:af:74:0e:35:4c:
         ef:65:20:39:d3:02:86:c1:7d:0e:ed:02:77:5e:18:4a:47:c8:
         c5:50:8a:8e:be:a3:ef:34:80:36:52:27:d5:27:82:1e:b5:73:
         9a:76:fa:87:c7:39:10:38:5f:b5:d3:74:74:ea:f5:0d:ed:aa:
         5d:d4:59:82:40:a6:b5:07:ba:f6:40:84:cc:10:a5:10:80:b2:
         6f:84:0a:55:14:02:95:5b:1f:7b:11:fc:ce:ed:d0:23:df:59:
         fd:6a:31:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----